Security Tools Administrator (Adversary Emulation Platform) for NATO with security clearance

WLG; Henegouwen; Sur place; EUR 52 000 - 75 000; Plein temps

Résumé du poste

WLG is seeking an engineer to own a Linux-based security tooling platform end to end, including the Linux servers, the containers it runs in, the accounts, the proxies and the monitoring that proves availability when the team needs it.

You will manage Linux servers, network services, and logs, review health daily, and drive automation to reduce manual work while maintaining security and compliance across a large organisation.

Qualifications

• A computer science or IT degree, or equivalent experience.
• Several years in IT security with focus on system administration and security tool management in a large organisation.
• Strong Linux administration, Docker container management, and scripting in Python, shell or PowerShell.
• IP switching, routing and network troubleshooting; virtual infrastructure on VMware.
• Log analysis as a diagnostic skill.
• Welcome extras: service management and monitoring tooling, configuration automation such as Ansible, ITIL, and certification such as CISSP, CISM or CISA

Responsabilités

• Installing, configuring and patching the Linux servers behind the platform, and managing accounts, permissions and security settings
• Configuring the network services it depends on, and keeping the proxy and access rules correct
• Reviewing logs and alerts before they become outages, verifying system health daily, and acting on tickets, changes and incidents
• Reporting on system health, monitoring activity and compliance - audit logs, performance, capacity trends
• Keeping the documentation and the inventory of integrated sources and tools genuinely current
• Testing backup restores, resolving performance bottlenecks, and automating away the manual work
• Acting as the subject-matter expert for the tool itself, through its whole lifecycle

Connaissances

Linux admin

Docker

Python scripting

PowerShell

Network troubleshooting

Log analysis

Ansible

ITIL

CISSP/CISM/CISA

Formation

Computer science/IT degree

Outils

VMware

Description du poste

A red team is only as good as the tooling behind it - and somebody has to keep that tooling up. A defence cyber team near Mons runs a platform for emulating real adversary behaviour against its own estate. You would be the person who owns that platform end to end: the Linux underneath it, the containers it runs in, the accounts, the proxies and the monitoring that proves it is available when the team needs it.

What You Would Be Doing

• Installing, configuring and patching the Linux servers behind the platform, and managing accounts, permissions and security settings
• Configuring the network services it depends on, and keeping the proxy and access rules correct
• Reviewing logs and alerts before they become outages, verifying system health daily, and acting on tickets, changes and incidents
• Reporting on system health, monitoring activity and compliance - audit logs, performance, capacity trends
• Keeping the documentation and the inventory of integrated sources and tools genuinely current
• Testing backup restores, resolving performance bottlenecks, and automating away the manual work
• Acting as the subject-matter expert for the tool itself, through its whole lifecycle

What you would bring

• A computer science or IT degree, or equivalent experience instead of one
• Several years in IT security with a focus on system administration and security tool management in a large organisation
• Strong Linux administration, Docker container management, and confident scripting in Python, shell or PowerShell
• IP switching, routing and network troubleshooting; virtual infrastructure on VMware
• Log analysis as a diagnostic skill - you spot the abnormal, not just the broken
• Welcome extras: service management and monitoring tooling, configuration automation such as Ansible, ITIL, and certification such as CISSP, CISM or CISA

Why this one is worth a look

It is a single, clearly owned platform in a serious security environment, with no travel attached, and it runs from a standing framework rather than a one-off project.